ABE blocks Mediawiki *.ccs and pictures

Discussions about the Application Boundaries Enforcer (ABE) module
sigbert
Posts: 3
Joined: Thu Jul 02, 2009 10:01 am

ABE blocks Mediawiki *.ccs and pictures

Post by sigbert »

Hi,

After the update to NoScript 1.95. I get

Code: Select all

[ABE] <LOCAL> Deny on {GET http://stirner.wiwi.hu-berlin.de/mediawiki/mmstat_de/skins/common/shared.css?164 <<< http://stirner.wiwi.hu-berlin.de/mediawiki/mmstat_de/index.php/Hauptseite}
SYSTEM rule:
Site LOCAL
Accept from LOCAL
Deny
when I access my MediaWiki. The text itself appears, but all the rest is blocked.

My configuration: The browser and the webserver are on the same machine. The webserver redirects my request to a webserver in a virtual machine, also on my machine. If I switch off ABE then everything works fine.

Following another post I updated to NoScript 1.9.5.2 development version, but still the same behaviour.

Any help appreciated

Sigbert
Mozilla/5.0 (X11; U; Linux x86_64; de; rv:1.9.0.11) Gecko/2009060309 Ubuntu/8.04 (hardy) Firefox/3.0.11
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: ABE blocks Mediawiki *.ccs and pictures

Post by Giorgio Maone »

What are the IPs of stirner.wiwi.hu-berlin.de?
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.1) Gecko/20090624 Firefox/3.5 (.NET CLR 3.5.30729)
sigbert
Posts: 3
Joined: Thu Jul 02, 2009 10:01 am

Re: ABE blocks Mediawiki *.ccs and pictures

Post by sigbert »

stirner: 141.20.100.252
Virtual machine: 10.0.2.15
Mozilla/5.0 (X11; U; Linux x86_64; de; rv:1.9.0.11) Gecko/2009060309 Ubuntu/8.04 (hardy) Firefox/3.0.11
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: ABE blocks Mediawiki *.ccs and pictures

Post by Giorgio Maone »

I'm not sure about what's going on, since the message you get suggests that stirner.wiwi.hu-berlin.de actually resolves to a LAN IP, however all you need should be inserting the following rule at the beginning of the SYSTEM ruleset you can edit from NoScript Options|Advanced|ABE :

Code: Select all

Site stirner.wiwi.hu-berlin.de
Accept
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.1) Gecko/20090624 Firefox/3.5 (.NET CLR 3.5.30729)
sigbert
Posts: 3
Joined: Thu Jul 02, 2009 10:01 am

Re: ABE blocks Mediawiki *.ccs and pictures

Post by sigbert »

Works :) Thanks a lot

Actually my /etc/hosts looks like

Code: Select all

127.0.0.1	localhost
141.20.100.252	stirner.wiwi.hu-berlin.de 
127.0.1.1	stirner.wiwi.hu-berlin.de tethys
Maybe I have the problem, because I renamed my computer from stirner to tethys and stirner.wiwi.hu-berlin.de is actually a VirtualHost on tethys.
Mozilla/5.0 (X11; U; Linux x86_64; de; rv:1.9.0.11) Gecko/2009060309 Ubuntu/8.04 (hardy) Firefox/3.0.11
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: ABE blocks Mediawiki *.ccs and pictures

Post by Giorgio Maone »

Your problem is apparently that you've got both an internal (127.0.0.1) and an external (141.20.100.252) IP assigned to the same host, therefore every request must be regarded by ABE as a "mixed cross-net request" and blocked by the SYSTEM "LocalRodeo" rule :P
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.1) Gecko/20090624 Firefox/3.5 (.NET CLR 3.5.30729)
Post Reply